Failure-controlled message publication and feedback in a publish/subscribe messaging environment

ABSTRACT

Control and/or feedback are provided for message publication in a publish/subscribe messaging environment. A number of different aspects are disclosed, and an embodiment may include one or more of these aspects. In each aspect, each subscribing application has an associated importance level for a subscription, and this importance level may vary among subscriptions for different message topics. Each published message has an associated topic. In some aspects, each published message also has associated criteria, where the criteria are specified with regard to message classification. In preferred embodiments, the message classification comprises importance criteria specifying requirements for importance level of subscribers registered for the topic of that message. Feedback can be provided regarding whether a message publication meets the importance criteria. Control over message publication can be based on whether a message publication meets the importance criteria.

CROSS-REFERENCE TO RELATED APPLICATIONS

The present invention is related to the following commonly-assigned andco-pending applications, which were filed on even date herewith andwhich are incorporated herein by reference: U.S. patent application Ser.No. ______, titled “MESSAGE PUBLICATION FEEDBACK IN A PUBLISH/SUBSCRIBEMESSAGING ENVIRONMENT” (Attorney Docket RSW920100170US1) and U.S. patentapplication Ser. No. ______, titled “CRITERIA-BASED MESSAGE PUBLICATIONCONTROL AND FEEDBACK IN A PUBLISH/SUBSCRIBE MESSAGING ENVIRONMENT”(Attorney Docket RSW920110020US1).

BACKGROUND

The present invention relates to computing systems, and deals moreparticularly with message publication control and feedback in apublish/subscribe, or “pub/sub”, messaging environment.

Publish/subscribe messaging systems are known in the art for publishingmessages in computing environments, and provide an effective way ofdisseminating information to multiple users. Pub/sub messaging enablemessages to be published to a widespread, dynamically changing andpotentially large audience in a timely manner. Typically, the messagepublishers are not concerned with where their messages are sent, and thesubscribers are not concerned with where the messages originate.Instead, an intermediary commonly referred to as a message broker istypically responsible for receiving messages from publishers, consultingpreviously-registered subscription information associated with thesubscribers to determine which subscribers should receive the publishedmessages, and then forwarding the messages to the appropriatesubscribers according to the registered subscriptions.

BRIEF SUMMARY

The present invention is directed to failure-controlled messagepublication and feedback in a publish/subscribe messaging environment.In one aspect, this comprises: receiving, at a message broker, a messagepublished by a message publisher, the message having associatedtherewith a topic and classification criteria for determining successfulpublication of the message; consulting, by the message broker,registered subscriptions of a plurality of message subscribers that haveregistered with the message broker to receive published messages, eachsubscription specifying a topic and subscriber classificationinformation, to determine whether requirements of the classificationcriteria associated with the published message are met; and responsiveto the consulting determining that the requirements are met, publishingthe message by the message broker and notifying the message publisherthat the published message was published successfully, and otherwisenotifying the message publisher that the published message was notpublished successfully. Publishing the message by the message brokerpreferably further comprises: selecting, by the message broker from theplurality of message subscribers, each subscriber for which theregistered topic matches the topic associated with the publishedmessage; and sending the message from the message broker to each of theat least one selected subscriber.

Embodiments of these and other aspects of the present invention may beprovided as methods, systems, and/or computer program products. Itshould be noted that the foregoing is a summary and thus contains, bynecessity, simplifications, generalizations, and omissions of detail;consequently, those skilled in the art will appreciate that the summaryis illustrative only and is not intended to be in any way limiting.Other aspects, inventive features, and advantages of the presentinvention, as defined by the appended claims, will become apparent inthe non-limiting detailed description set forth below.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

The present invention will be described with reference to the followingdrawings, in which like reference numbers denote the same elementthroughout.

FIG. 1 illustrates components which may be used with an embodiment ofthe present invention;

FIGS. 2-7 provide flowcharts depicting logic which may be used whenimplementing one or more embodiments of the present invention;

FIG. 8 illustrates components which may be used with an embodiment ofthe present invention in a pub/sub cluster environment;

FIG. 9 depicts a data processing system suitable for storing and/orexecuting program code; and

FIG. 10 depicts a representative networking environment in which one ormore embodiments of the present invention may be used.

DETAILED DESCRIPTION

The present invention is directed to control and/or feedback for messagepublication in a pub/sub messaging environment. A number of differentaspects are disclosed. An embodiment may include one or more of theseaspects. In each aspect, each subscribing application (referred toherein equivalently as a “subscriber” or “message subscriber”) hasassociated classification information for a subscription, and thisclassification information may vary among subscriptions for differentmessage topics. Each published message has an associated topic, whichmay be specified as a string value. In some aspects, each publishedmessage also has associated criteria, where the criteria are specifiedwith regard to message classification. In preferred embodiments, thesubscriber classification information in a subscription comprises animportance level of the subscriber with regard to the topic of thesubscription, and the subscriber classification information is thereforediscussed herein primarily with reference to importance levels. Also inpreferred embodiments, the message classification in the associatedcriteria for a published message comprises importance level ofsubscribers registered for the topic of that message, and thus the term“importance criteria” is used herein when discussing such criteria.

Scenarios exist where it is important for the application publishing amessage (referred to equivalently herein as a “publisher” or “messagepublisher”) to know that at least some particular subset of subscribershas received a published message. Some messaging engines support thisconcept to a degree. The IBM® WebSphere® Message Queueing system(hereinafter, “WebSphere MQ”), for example, allows a publisher toreceive, on request, a warning if no subscriber receives a publishedmessage. (“IBM” and “WebSphere” are registered trademarks ofInternational Business Machines Corporation in the United States, othercountries, or both.) Websphere MQ also allows designating parts of thetopic space (i.e., particular topic strings or portions thereof) suchthat publishers are notified that a message publication failed if nosubscriber receives a message published to that topic space. There is aneed for more flexibility than what is available with existing support,however, as pub/sub systems known to the inventors do not providemessage publication control and feedback as disclosed herein.

Suppose, for example, that a message publisher publishes messages usinga topic “/orders/widgets”, and that it is necessary for these messagesto be received by at least 3 subscribers that each represent a differentwarehouse. Existing support in WebSphere MQ enables notifying thepublisher if there are no subscribers registered for the topic—oralternatively, if there are no subscribers registered for a portion ofthe topic space such as “/orders”—but does not provide control fordelivering the message to a particular number of subscribers and doesnot provide feedback regarding whether the message was delivered to therequired number of subscribers.

As another example, suppose a published message needs to be received byboth the audit department and the accounting department, and if both ofthese departments are not registered subscribers of the message, thenneither department should receive it. No pub/sub systems are known tothe inventors that provide this level of control over the publishing ofa message.

According to certain aspects of the present invention, a publisher isable to control the publishing of messages based on the registeredsubscribers and their importance levels (or more generally, theirsubscriber classification information), where this subscriberinformation may be determined dynamically upon publication of themessage by the publisher. In other aspects, a publisher receivesfeedback about the publication of messages to the registeredsubscribers. These aspects may be combined, providing both control andfeedback, as will be discussed in more detail herein.

Suppose, by way of example, that a message publisher publishes a messagehaving a particular topic and also having associated importance criteriaindicating that the message publication requires at least 2 subscribershaving an importance level of less than or equal to 5 (i.e., <=5). Inthe examples presented herein, importance levels are represented asintegers between 0 and 9, where 9 is the highest and 0 is the lowest.Further suppose that 1 subscriber with an importance level of 5 hasregistered for this topic, and that 6 subscribers with an importancelevel of 3 have also registered for this topic. Because there are 7subscribers meeting the “importance level <=5” requirement in thisexample, the message can be published to all 7 subscribers and thepublisher can be informed that the publication was successful. In someaspects, the publisher may be informed of the actual number of matchingsubscribers. On the other hand, if the importance criteria specifiedthat at least 2 subscribers having an importance level >=5 wererequired, then the criteria are not met because only 1 subscriber meetsthe “importance level >=5” requirement. Some aspects of the presentinvention provide for publishing the message to the matching subscriberand notifying the publisher that the criteria were not met, while otheraspects will prevent publishing the message to any of the subscribersand will notify the publisher that publication of the message failed.Differences in message publication control and feedback among variousaspects of the present invention are discussed in more detail below.

Components in one embodiment of a system that provides messagepublication control and feedback, as disclosed herein, will now bedescribed with reference to FIG. 1.

Components shown in 1 comprise a message publisher 100; a message broker110; several message subscribers 120 a, 120 b, . . . 120 n; and asubscription registry 130. One or more of the components shown in FIG. 1may be included in a messaging engine in which an embodiment of thepresent invention is implemented. These components will now be describedin more detail.

Message publisher 100 publishes messages to message broker 110. Eachpublished message has an associated topic and, in some aspects,associated criteria for publishing the message to subscribers. Inpreferred embodiments, the criteria are expressed with regard to messageimportance values. Each subscriber 120 a, 120 b, . . . 120 n registersone or more subscriptions with message broker 110. Each subscriptionspecifies a topic and an importance value. Message broker 110 maintainsthese subscriptions in subscription registry 130, which may be adatabase or other persistent store. Upon receiving a message frompublisher 100, message broker 110 consults the subscription registry 130when determining whether to send the message to subscribers 120 a, 120b, . . . 120 n. (Although a single publisher 100 is depicted in FIG. 1,it will be understood that this is by way of illustration only, and anactual implementation of the present invention may support a number ofconcurrently-active message publishers.)

Importance criteria for a particular message may be set by the messagepublisher. Alternatively, the criteria may be configured in other wayswithout deviating from the scope of the present invention, includingthrough an administrative interface. When importance criteria are set bythe message publisher, they may be distributed with the publishedmessage. Alternatively, the importance criteria may be stored in arepository in association with the published message (e.g., whereby thepublished message is usable as an index for retrieving the importancecriteria). This latter approach is preferably also used when theimportance criteria are configured by an administrator or othertechnique.

Importance levels may be specified in binary form—that is, signifyingthe importance level as “important” or “not important”. Alternatively,more fine-grained support may be provided through use of additionalimportance levels. By way of illustration but not of limitation,discussions herein refer to an embodiment where importance levels areprovided as integer values 0 though 9, where 9 is the highest or “mostimportant” level and 0 is the lowest or “least important” level, asnoted earlier.

In one approach, importance levels for each individual subscriber areset by a systems administrator. Importance levels may be set in otherways without deviating from the scope of the present invention. In someaspects, importance levels may be used to control the order in whichsubscribers will receive published messages, whereby subscribers thatregistered higher importance levels on that topic receive messagesbefore subscribers that registered lower importance levels.

According to an embodiment of the present invention, a particularsubscriber may subscribe to different topics using different importancelevels. A subscriber 120 a might register for a topic “orders/widgets”with importance level 4, for example, while registering for a topic“orders/gadgets” with importance level 6. At the same time, subscriber120 b might register for the topic “orders/widgets” with importancelevel 1, while not registering at all for the topic “orders/gadgets”. Inanother approach, subscriber 120 n might register for a portion of thetopic space with importance level 5 by specifying this importance levelfor the topic “orders/”—which has the effect, in this example, ofregistering for both of the topics “orders/widgets” and “orders/gadgets”with importance level 5.

Notably, importance levels may be set for individual subscribers andtopics in a way that causes the semantics in importance criteriaassociated with particular publishing scenarios to be carried out. Withreference to the scenario discussed earlier where published messagesneed to be published to at least 3 warehouses, for example, theimportance level assigned to the warehouse subscribers therefore needsto be aligned with the importance level(s) in the importance criteriathat will be associated with these published messages.

Each aspect of the present invention uses previously-registeredsubscription information. Referring now to 2, a flowchart is provideddepicting logic which may be used when implementing a subscriberregistration process. At Block 200, a subscription request from asubscriber is received at a message broker, where this subscriptionrequest includes a topic and an importance level. Optionally, anembodiment of the present invention provides for controlling whetherparticular subscribers are allowed to subscribe at particular importancelevels, and this may vary depending on the topic of the subscription.For example, it may be useful to restrict the subscribers that areallowed to register at the highest importance level for a topic“employeeInfo/”. Registration restrictions may be specified, forexample, by a systems administrator who creates a configuration filethat will be consulted during the subscriber registration process.Accordingly, Block 210 tests whether the subscriber sending thecurrently-processed subscription request is allowed to subscribe at theimportance level specified in the subscription request. If not, thenthis subscription request is not honored, and processing returns toBlock 200 to process a different subscription. (A notification or errormessage may be sent to the subscriber in this case, although this hasnot been illustrated in FIG. 2.) On the other hand, when this subscriberis allowed to subscribe at the requested importance level—and also in anembodiment where subscription registrations are not restricted—controltransfers to Block 220, where this subscription is added to thecollection of registered subscriptions. With reference to the componentsillustrated in FIG. 1, the processing of Block 220 comprises adding thesubscription to a subscription registry 130.

An embodiment of the present invention allows publishers to receive awarning or failure notification if not enough “important” subscribersare registered for a message published by that publisher. In addition orinstead, a warning or failure notification can be provided if there arenot enough “important” subscribers for a particular portion of the topicspace at which a message is published. These warning or failurenotifications may be directed to a systems administrator in addition to,or instead of, to the publisher without deviating from the scope of thepresent invention.

An embodiment of the present invention may provide for publisher controlover, and/or feedback from, the publishing of messages in a number ofways, as will now be discussed in more detail with reference to FIGS.3-7.

In a first aspect, an information-only approach is provided, whereby amessage broker provides feedback to the message publisher regardingmessage delivery. This aspect is illustrated by the processing in FIG.3. As shown therein, a message publisher publishes a message with anassociated topic (Block 300). The message broker consults the registeredsubscriptions to determine whether any subscriber that registered forthis topic has not yet been sent the message (Block 310). If the test inBlock 310 has a positive result, then processing continues at Block 330where the message is delivered to the located subscriber. Block 340 thenrecords information about this delivery, after which control returns toBlock 310 to determine whether there are any more subscribers for thismessage. When the test at Block 310 has a negative result, indicatingthat there are no more subscribers for this message, processingcontinues at Block 320, where feedback regarding the message delivery isprovided to the message publisher. (See FIG. 1, where this feedback tothe publisher is depicted.) In an alternative approach, which may beused with this aspect and/or with other aspects disclosed herein, inaddition to—or instead of—publishing the feedback to the publisher, thefeedback may be published to a third party, or published to a separatetopic, or written to a different location (such as by writing anotification into a message log). This alternative approach may be used,for example, for enabling a separate application to monitor messagepublication in order to detect problems or patterns. This applicationmight be configured to send a notification to an administrator, forexample, upon detecting that not enough important subscribers werereceiving message publications on a particular topic.

The information which is recorded at Block 340 may comprise, by way ofexample, an identifier of the subscriber and/or the importance level ofthat subscriber. The information provided as feedback to the publisherat Block 320 may comprise all of the information for each individualsubscriber as recorded at Block 340. Alternatively, the publisher mayreceive feedback in another form, such as a count of subscribers, byimportance level, based on the information recorded at Block 340.

In this and other aspects, the message publisher may use the feedbackfrom the message broker to make an application-specific decision as towhether the message reached the required subscribers before takingfurther action. For example, if the publisher needs all of thesubscribers at a particular importance level to receive a particularmessage before the publisher continues on to publish another message,the feedback from the message broker can be used to determine whetherthis condition is met, and the publisher can then publish the nextmessage—or not—in view of the feedback. As another example, when messagepublishing is used within a transaction processing system, the publishermight need to determine whether a message reached all requiredsubscribers before issuing a commit for a transaction, and if it didnot, the publisher can roll back the transaction instead.

In a second aspect, an approach is provided that uses parameter-basedcriteria for message delivery. This aspect is illustrated by theprocessing in FIG. 4. A message publisher publishes a message with anassociated topic and importance criteria (Block 400). In this aspect,the importance criteria are specified as one or more parameters,indicating how many subscribers at particular importance level(s) mustreceive the message in order to consider the publication a success. Forexample, if the importance criteria comprises two parameters of the form(“Importance Level>=5” AND “Minimum Number of Subscribers=2”), then atleast 2 subscribers, each having an importance level of 5 or higher,must receive the message for the publication to be considered assuccessful.

The message broker consults the registered subscriptions to determinewhether any subscriber registered for this topic and matching theimportance level in the associated importance criteria has not yet beensent the message (Block 410). If the test in Block 410 has a positiveresult, then processing continues at Block 420. Optionally, an ordereddelivery approach may be used, where a message is sent to subscribersregistered at higher importance levels before the same message is sentto subscribers registered at lower importance levels. Accordingly, Block420 indicates finding the most-important matching subscriber that hasnot yet been sent the message, and sending the message to thatsubscriber. Block 430 then records information about this delivery,after which control returns to Block 410 to determine whether there areany more matching subscribers for this message. Preferably, theinformation recorded at Block 430 comprises the importance level of thesubscriber to which the message is sent at Block 420.

When the test at Block 410 has a negative result, indicating that thereare no more matching subscribers for this message, processing continuesat Block 440 for providing feedback regarding the message delivery tothe message publisher. Block 440 tests whether the message was deliveredto enough subscribers, of the appropriate importance level, to meet therequirements of the parameters specifying the importance criteria. Ifnot, then Block 450 performs controlled failure handling to send anotification message to the publisher. This controlled failure handlingcomprises a fourth aspect, and is described below with reference to FIG.5. (The notification message that will be sent to the publisheraccording to the processing of FIG. 5 varies, as discussed below.)

When the test in Block 440 has a positive result, indicating that themessage was sent to enough subscribers, processing continues at Block460 where feedback is provided to the publisher indicating that themessage publication was successful.

In a third aspect, an approach is provided that uses rule-basedcriteria. This approach is similar to the parameter-based criteriaapproach, but specifies the importance criteria using one or more rulesto indicate how many subscribers at particular importance level(s) mustreceive the message in order to consider the publication a success.Using rules may enable supporting more powerful and more complicatedconditions as compared to the parameter-based approach. Rules may bespecified using a syntax similar to the Structured Query Language(commonly known as “SQL”) or using a regular expression syntax, by wayof example. For example, a rule might be expressed in a form such as “(3subscriptions>=Importance Level 5) OR (5 subscriptions>=Importance Level2)”. As a further example, in an implementation supporting a non-integerand non-importance-level approach for message classification, a scenariousing free-text matching might specify the classification criteria usinga rule to require “(at least 2 subscribers where subscriber.type=“blue”)AND (at least 1 subscriber where subscriber.type=“red”)”.

Processing for the rule-based criteria approach is preferably analogousto that of the parameter-based criteria approach, with the exception ofdetermining a match to the importance criteria using the rules insteadof the parameters. Accordingly, the logic depicted in FIG. 4 may also beused when implementing the third aspect. A commercially-available rulesengine may be leveraged for analyzing the rules and determining whetherthe importance level in a particular registered subscription meets theconditions specified in the rules.

In a fourth aspect, controlled failure handling is provided asadditional functionality in the parameter-based criteria approach of thesecond aspect and/or the rule-based criteria approach of the thirdaspect. An implementation may be coded for a particular setting of thecontrolled failure handling. Alternatively, an implementation may enablea publisher or perhaps a systems administrator to specify the behaviorthat occurs when importance criteria are not met for a particularmessage. When the implementation is coded for a particular setting, thismay comprise setting a WARN vs. FAIL switch, thus indicating whetherprocessing should use a warn mode or a fail mode. When the publisher oradministrator provides input for the controlled failure handling, thispreferably comprises allowing the publisher or administrator to choosebetween warn mode and fail mode.

In a preferred embodiment of the controlled failure handling, it ispresumed that messages are being delivered to subscribers in order ofimportance level. Accordingly, if warn mode is selected for thecontrolled failure handling, a message will be delivered toless-important subscribers even when the importance criteria are notmet. For example, in the parameter-based criteria example discussedabove with reference to the second aspect (i.e., where successfulpublication requires at least 2 subscribers with importance level>=5),if there is only 1 subscriber with importance level>=5, then the messageis still published to that subscriber and to any other registeredsubscribers at lower importance levels. A warning message is provided asfeedback to the message publisher. On the other hand, if fail mode isselected for the controlled failure handling, then a message would notbe delivered to any further subscribers as soon as it is determined thatthe importance criteria are not met. (Refer to the discussion of FIG. 5below, where this difference in processing between warn mode and failmode is described in more detail.)

In a more complex implementation, the controlled failure handling may befine-tuned according to specified rules. For example, a rule might bespecified which has semantics of “If the message cannot be published toat least 2 subscribers having importance level 5, then warn thepublisher, and if the message cannot be published to at least 2subscribers having importance level 4, also notify the publisher offailure.”

Referring now to FIG. 5, Block 500 tests whether the implementationsupports both warn and fail processing. If so, then Block 530 testswhether warn processing has been selected (e.g., by the publisher oradministrator). If warn processing has been selected, processingcontinues at Block 550, which tests whether any subscriber registeredfor this topic has not yet been sent the message. If the test in Block550 has a positive result, then the message is sent to that subscriberat Block 560. Control then returns to Block 550 for iterative processingthat enables sending the published message to all subscribers matchingthe topic. When the message has been sent to all of these subscribers,the test in Block 550 has a negative result, and processing thencontinues at Block 570 by sending a notification message to thepublisher. This notification message preferably reports that the messagepublication failed, or at least partially failed (i.e., indicating thatthe message was sent to subscribers although the importance criteriawere not met).

The warn mode processing of Blocks 550-570 is also reached following anegative result at Block 500 (i.e., the implementation does not supportboth warn and fail processing) and a positive result for the test inBlock 510, where this positive result indicates that warn mode isselected even though the implementation does not support both warn andfail processing.

When the test in Block 530 has a negative result, indicating that theimplementation supports both warn and fail processing but warn mode isnot selected, processing reaches Block 540. Block 540 tests whether failmode is selected. If this test has a negative result, then neither warnor fail mode is selected, and control preferably returns from FIG. 5 tothe invoking logic. On the other hand, when the test in Block 540 has apositive result, then processing continues at Block 570 by sending anotification message to the publisher. This notification messagepreferably reports that the message publication failed, or at leastpartially failed (i.e., indicating that the message was sent to thesubscribers having the appropriate importance level). Notably, in failmode, the message is not sent to subscribers that do not have theappropriate importance level.

The fail mode processing of Block 570 is also reached following apositive result for the test in Block 520, where this positive resultindicates that fail mode is selected even though the implementation doesnot support both warn and fail processing. If the test in Block 520 hasa negative result, this indicates that neither warn or fail mode isselected, and control preferably returns from FIG. 5 to the invokinglogic

In a fifth aspect, an approach is provided for what may be referred toas “all-or-nothing” publication. This aspect may be provided asadditional functionality in the parameter-based criteria approach and/orthe rule-based criteria approach, where the implementation supports theabove-discussed controlled failure handling for controlling the behaviorthat occurs when importance criteria are not met for a particularmessage. In a relatively simple implementation, this may be provided asan “on/off” parameter, where the system sets the parameter to “on” whenall-or-nothing publication is desired and to “off” when such handling isnot desired. In a more complex implementation, finer-grained controlover all-or-nothing publication may be supported by the processing forthe parameter-based approach or the rule-based approach to allow thepublisher, or perhaps the systems administrator, to specify whetherall-or-nothing publication handling should occur for a particular set ofconditions. When all-or-nothing publication is in use, the importancecriteria for a message must be met as a condition for publishing themessage at all, and if the conditions are not met, then the message willnot be sent to any subscribers; on the other hand, if the conditions aremet, then all subscribers will receive the message.

This fifth aspect is illustrated by the processing in FIG. 6. As showntherein, a message publisher publishes a message with an associatedtopic and importance criteria (Block 600). In this aspect, the messagebroker consults the registered subscriptions before sending the messageto any subscriber. Accordingly, Block 610 indicates that the messagebroker consults the subscription registry to determine whether there areenough registered subscribers for this topic, of the appropriateimportance level, to meet the requirements specified in the importancecriteria associated with the message. If not, then Block 620 sendsfeedback to the publisher indicating that the publication failed. On theother hand, if the importance criteria are met by the registeredsubscribers, then control reaches Block 630 which begins an iterativeprocess to send the message to all of the subscribers registered forthis topic.

In particular, Block 630 determines whether any subscriber registeredfor this topic has not yet been sent the message. If the test in Block630 has a positive result, then processing continues at Block 640 wherethe message is sent to that subscriber. Notably, the message is sentwithout regard to whether the importance level registered by thissubscriber matches the importance criteria associated with the message.Control then returns to Block 630 to determine whether there are anymore subscribers for this message.

When the test at Block 630 has a negative result, indicating that thereare no more subscribers for this message, processing continues at Block650, where feedback is sent to the publisher indicating that the messagepublication was successful.

Optionally, information (such as the importance level of the subscriberto which the message is sent) may be recorded about the delivery to thesubscribers and subsequently provided with the feedback to the publisherat Block 650, although this information recording has not been depictedin FIG. 6.

As noted earlier, the importance level is not limited to use of integervalues. Accordingly, a rule may be specified using syntax such as“(Importance Level=“auditing” AND Importance Level=“accounting”)” tocarry out the all-or-nothing publication scenario discussed earlierwhere a message must be delivered to both the auditing department andthe accounting department, or the message must not be delivered at all.(When using non-integer values for importance levels, an orderingmechanism is preferably added for those aspects that use in-ordermessage sending. For example, digits may be prepended to alphanumericimportance values, or a lookup table may be consulted that specifiesrelative importance levels of various alphanumeric importance values.)

All-or-nothing publication that sends each message on a particular topicto an auditing subscriber (e.g., an auditing department or auditingapplication) may be used as a mechanism for auditing message publicationon that topic, whereby the auditing subscriber can use the receivedmessages to create an audit trail. When using integers for importancelevels, the auditing subscriber should be registered for this topic witha durable subscription at the highest importance level, and theimportance criteria for messages published on that topic should requireat least one subscriber having the highest importance level. (Durablesubscriptions are discussed in more detail below.) Provided that anembodiment of the present invention uses the optional processing thatallows for restricting which subscribers can register subscriptions atparticular importance levels (as discussed earlier with reference toBlock 210 of FIG. 2), subscribers other than the auditing subscriber canbe prevented from registering subscriptions at the highest level.Accordingly, even if the auditing subscription is removed for anyreason, the auditing subscriber is assured of receiving a complete copyof the published messages on the topic by specifying the importancecriteria in the all-or-nothing publication approach to prevent allsubscribers from receiving a published message when the highest-levelauditing subscriber is not able to receive that message.

In a sixth aspect, the all-or-nothing approach is used in atransactional publishing model. That is, the publishing of the messageis modelled as a transaction which can be committed or rolled back. Inthis sixth aspect, the message is sent to subscribers within the scopeof a transaction, and then a check is made to determine whether thepublication was successful according to the importance criteria. If so,then the transaction is committed and if not, the transaction is rolledback. This aspect is illustrated by the processing in FIG. 7. As showntherein, a publisher publishes a message with an associated topic andimportance criteria (Block 700). A transaction is started (Block 710).The message broker consults the registered subscriptions to determinewhether any subscriber registered for this topic and matching theimportance level in the associated importance criteria has not yet beensent the message (Block 720). If the test in Block 720 has a positiveresult, then processing continues at Block 730. Optionally, an ordereddelivery approach may be used, where a message is sent to subscribersregistered at higher importance levels before the same message is sentto subscribers registered at lower importance levels. Accordingly, Block730 indicates finding the most-important matching subscriber that hasnot yet been sent the message, and sending the message to thatsubscriber. Block 740 then records information about this delivery,after which control returns to Block 720 to determine whether there areany more matching subscribers for this message. Preferably, theinformation recorded at Block 740 comprises the importance level of thesubscriber to which the message is sent at Block 730.

When the test at Block 720 has a negative result, indicating that thereare no more matching subscribers for this message, processing continuesat Block 750. Block 750 tests whether the message was sent to enoughsubscribers, of the appropriate importance level, to meet the importancecriteria. If not, then Block 760 rolls back the transaction and Block770 provides feedback to the publisher, indicating that the publicationfailed. On the other hand, when the importance criteria were met, thetest in Block 750 has a positive result and processing continues atBlock 780. Blocks 780 and 790 iterate through all remaining subscribersmatching the topic of the message, with Block 780 testing whetheranother such subscriber registered for this topic has not yet been sentthe message, and delivering the message to the subscriber at Block 790.When the test at Block 780 has a negative result, indicating that thereare no more subscribers for this message, processing continues at Block795, where the transaction is committed. Block 799 then providesfeedback to the publisher, indicating that the message publication wassuccessful.

It should be noted that when delivery of a message to a subscriber isconsidered complete may vary among messaging systems. For example,some—but not all—pub/sub messaging systems consider delivery to becomplete when a message is placed onto a queue for a subscriber.Notably, placing the message onto a subscriber's queue does not meanthat the subscribing application has actually received, or processed,the message. When using a transactional publishing model, a subscribingapplication cannot read a published message from its message queue priorto the commit or rollback of the transaction. Committing the transactionenables the subscriber to read the message, whereas rolling back thetransaction ensures that the subscriber will never see the message.Implementations of the present invention are not limited to a particularinterpretation of delivery completeness.

In some pub/sub messaging environments, a pub/sub cluster approach isused whereby multiple message brokers are connected together. Anembodiment of the present invention may be used in such clusteredenvironments, and subscribers which are reachable through each of themessage brokers may then be considered when determining whether theimportance criteria for a particular message are met. Components whichmay be used when implementing an embodiment of the present invention inthis pub/sub cluster approach are illustrated in FIG. 8. In thisexample, 3 message brokers are interconnected; each message broker isshown as having its own subscription registry; a single messagepublisher is shown (for ease of illustration only) as publishingmessages to each of the message brokers; and two message subscribers (byway of example) are shown as being reachable from each of the messagebrokers.

In a pub/sub cluster environment, when it is desired to provideall-or-nothing publishing according to the fifth aspect described above,an embodiment of the present invention is preferably adapted from thelogic depicted in FIG. 6 to implement a multi-phase publish between themessage brokers. In this multi-phase publish, the message brokerconnected to the publisher notifies the other message brokers of thetopic and importance criteria of the message. The notified messagebrokers consult their subscription registries to determine which oftheir registered subscribers for this topic meet the importance criteriafor this message, and then report this information back to the notifyingmessage broker. The notifying message broker then consolidates theinformation from the other message brokers, along with information onits own matching subscribers, to determine whether the importancecriteria are met by the collection of message subscribers. If so, thenthe notifying message broker notifies the other message brokers, andeach message broker (including the notifying message broker as well asthe notified message brokers) forwards the message to all registeredsubscribers for this topic. If the importance criteria are not met, whenconsidering the responses from all of the message brokers, then themessage is not published to any of the registered subscribers. Thenotifying message broker is responsible for providing feedback to themessage publisher as to whether the publication was successful.

As an alternative, the transactional publishing model according to thesixth aspect described above may be used in a pub/sub clusterenvironment. In this alternative, an embodiment of the present inventionis preferably adapted from the logic depicted in FIG. 7 to implement amulti-phase publish between the message brokers using a transactionalpublish model. In this transactional multi-phase publish, the messagebroker connected to the publisher starts a transaction and then notifiesthe other message brokers of the topic and importance criteria of themessage. The notified message brokers start a cascaded transaction andthen iteratively consult their subscription registries to locate aregistered subscriber for this topic that meets the importance criteriafor this message. The message is sent to the matching subscriber,preferably in an order from highest importance to lowest importance, andthe importance level of the subscriber is recorded. When the message hasbeen sent to each subscriber that registered the appropriate importancelevel for the topic, the message broker determines how many subscribersmet the importance criteria. The notified brokers return thisinformation back to the notifying message broker. The notifying messagebroker then consolidates the information from the other message brokers,along with information on its own matching subscribers, to determinewhether the importance criteria are met by the collection of messagesubscribers. If so, then the notifying message broker notifies the othermessage brokers that their cascaded transactions can be committed, andthe notifying message broker also commits its transaction. If theimportance criteria are not met, when considering the responses from allof the message brokers, then the notifying message broker notifies theother message brokers that their cascaded transactions must be rolledback, and the notifying message broker also rolls back its transaction.The notifying message broker is responsible for providing feedback tothe message publisher as to whether the publication was successful.

It may happen, when using the transactional publishing model in apub/sub cluster environment, that a relatively long amount of timepasses before the message brokers all complete their processing. It maytherefore be advantageous to use an asynchronous messaging approachwhereby the publisher decouples its processing of the messagepublication from its processing of the feedback.

Some pub/sub messaging systems provide what is termed “retained”messages. A retained message, in this context, is a message that will bekept by a message broker after it is initially sent to registeredsubscribers. Typically, a retained message is marked by the publisher asa retained message when published. If a new subscription is registeredfor that message topic, the retained message can be sent to thissubsequently-registered subscriber even though the subscription did notexist when the message was originally published. Retained messages maybe supported by embodiments of the present invention. In one approach,if the original publication of a message marked as a retained message issuccessful according to the importance criteria, that message remainsavailable for sending to subsequently-registering subscribers (forexample, upon request of such a subscriber). In aspects wheresubscribers receive published messages even though the importancecriteria were not met (e.g., when warn mode is selected), then theretained message is preferably sent to subsequently-registeringsubscribers; in other aspects, the retained message is not available tosubsequently-registering subscribers. For the information-only approachof the first aspect, the feedback provided to the message publisherpreferably includes results from publishing retained messages tosubsequently-registering subscribers if that feedback has not yet beendelivered (or remains available for asynchronous access). In somescenarios, it may be desirable to delay the determination of whether aparticular message publication completed successfully until subscribers(or some number thereof) receive retained messages. It will be obviousto one of ordinary skill in the art, in view of the disclosure providedherein, how the processing of the various aspects may be modified toaccommodate such delayed determination if desired for a particularimplementation.

Some pub/sub messaging systems support what are termed “durable”subscriptions. A durable subscription, in this context, is a registeredsubscription that remains active even while the subscriber isdisconnected from the pub/sub messaging system. Upon reconnecting, thesubscriber will receive messages that were published to topics matchingthe durable subscription during the period of the disconnect. Bycontrast, non-durable subscriptions are removed when the subscriberdisconnects, and subscribers do not receive messages published to topicsmatching non-durable subscriptions during the period of the disconnect.Durable subscriptions may be supported by embodiments of the presentinvention. In one approach, if the original publication of a messagepublished to a topic matching a durable subscription is successfulaccording to the importance criteria, that message is preferably sent tolater-connecting subscribers with a previously-registered durablesubscription to that topic (for example, upon request of such asubscriber). In aspects where subscribers receive published messageseven though the importance criteria were not met (e.g., when warn modeis selected), then a previously-published message is preferably sent tolater-connecting subscribers with a previously-registered durablesubscription to that topic; in other aspects, the previously-publishedmessage is not sent to later-connecting subscribers with apreviously-registered durable subscription to that topic. For theinformation-only approach of the first aspect, the feedback provided tothe message publisher preferably includes results from sending apreviously-published message to these later-connecting subscribers ifthat feedback has not yet been delivered (or remains available forasynchronous access). In some scenarios, it may be desirable to delaythe determination of whether a particular message publication completedsuccessfully until these later-connecting subscribers (or some numberthereof) receive previously-published messages. It will be obvious toone of ordinary skill in the art, in view of the disclosure providedherein, how the processing of the various aspects may be modified toaccommodate such delayed determination if desired for a particularimplementation.

Referring now to FIG. 9, a data processing system 900 suitable forstoring and/or executing program code includes at least one processor912 coupled directly or indirectly to memory elements through a systembus 914. The memory elements can include local memory 928 employedduring actual execution of the program code, bulk storage 930, and cachememories (not shown) which provide temporary storage of at least someprogram code in order to reduce the number of times code must beretrieved from bulk storage during execution.

Input/output (“I/O”) devices (including but not limited to keyboards918, displays 924, pointing devices 920, other interface devices 922,etc.) can be coupled to the system either directly or throughintervening I/O controllers or adapters (916, 926).

Network adapters may also be coupled to the system to enable the dataprocessing system to become coupled to other data processing systems orremote printers or storage devices through intervening private or publicnetworks (as shown generally at 932). Modems, cable modem attachments,wireless adapters, and Ethernet cards are just a few of thecurrently-available types of network adapters.

FIG. 10 illustrates a data processing network environment 1000 in whichthe present invention may be practiced. The data processing network 1000may include a plurality of individual networks, such as wireless network1042 and wired network 1044. A plurality of wireless devices 1010 maycommunicate over wireless network 1042, and a plurality of wireddevices, shown in the figure (by way of illustration) as workstations1011, may communicate over network 1044. Additionally, as those skilledin the art will appreciate, one or more local area networks (“LANs”) maybe included (not shown), where a LAN may comprise a plurality of devicescoupled to a host processor.

Still referring to 10, the networks 1042 and 1044 may also includemainframe computers or servers, such as a gateway computer 1046 orapplication server 1047 (which may access a data repository 1048). Agateway computer 1046 serves as a point of entry into each network, suchas network 1044. The gateway 1046 may be preferably coupled to anothernetwork 1042 by means of a communications link 1050 a. The gateway 1046may also be directly coupled to one or more workstations 1011 using acommunications link 1050 b, 1050 c, and/or may be indirectly coupled tosuch devices. The gateway computer 1046 may be implemented utilizing anEnterprise Systems Architecture/390® computer available from IBM.Depending on the application, a midrange computer, such as an iSeries®,System i™, and so forth may be employed. (“Enterprise SystemsArchitecture/390” and “iSeries” are registered trademarks, and “Systemi” is a trademark, of IBM in the United States, other countries, orboth.)

The gateway computer 1046 may also be coupled 1049 to a storage device(such as data repository 1048).

Those skilled in the art will appreciate that the gateway computer 1046may be located a great geographic distance from the network 1042, andsimilarly, the workstations 1011 may be located some distance from thenetworks 1042 and 1044, respectively. For example, the network 1042 maybe located in California, while the gateway 1046 may be located inTexas, and one or more of the workstations 1011 may be located inFlorida. The workstations 1011 may connect to the wireless network 1042using a networking protocol such as the Transmission ControlProtocol/Internet Protocol (“TCP/IP”) over a number of alternativeconnection media, such as cellular phone, radio frequency networks,satellite networks, etc. The wireless network 1042 preferably connectsto the gateway 1046 using a network connection 1050 a such as TCP orUser Datagram Protocol (“UDP”) over IP, X.25, Frame Relay, IntegratedServices Digital Network (“ISDN”), Public Switched Telephone Network(“PSTN”), etc. The workstations 1011 may connect directly to the gateway1046 using dial connections 1050 b or 1050 c. Further, the wirelessnetwork 1042 and network 1044 may connect to one or more other networks(not shown), in an analogous manner to that depicted in FIG. 10.

As will be appreciated by one skilled in the art, aspects of the presentinvention may be embodied as a system, method, or computer programproduct. Accordingly, aspects of the present invention may take the formof an entirely hardware embodiment, an entirely software embodiment(including firmware, resident software, micro-code, etc.), or anembodiment combining software and hardware aspects that may allgenerally be referred to herein as a “circuit”, “module”, or “system”.Furthermore, aspects of the present invention may take the form of acomputer program product embodied in one or more computer readable mediahaving computer readable program code embodied thereon.

Any combination of one or more computer readable media may be utilized.The computer readable medium may be a computer readable signal medium ora computer readable storage medium. A computer readable storage mediummay be, for example, but not limited to, an electronic, magnetic,optical, electromagnetic, infrared, or semiconductor system, apparatus,or device, or any suitable combination of the foregoing. More specificexamples (a non-exhaustive list) of the computer readable storage mediumwould include the following: an electrical connection having one or morewires, a portable computer diskette, a hard disk, a random access memory(“RAM”), a read-only memory (“ROM”), an erasable programmable read-onlymemory (“EPROM” or flash memory), a portable compact disc read-onlymemory (“CD-ROM”), DVD, an optical storage device, a magnetic storagedevice, or any suitable combination of the foregoing. In the context ofthis document, a computer readable storage medium may be any tangiblemedium that can contain or store a program for use by or in connectionwith an instruction execution system, apparatus, or device.

A computer readable signal medium may include a propagated data signalwith computer readable program code embodied therein, for example, inbaseband or as part of a carrier wave. Such a propagated signal may takeany of a variety of forms, including, but not limited to,electro-magnetic, optical, or any suitable combination thereof. Acomputer readable signal medium may be any computer readable medium thatis not a computer readable storage medium and that can communicate,propagate, or transport a program for use by or in connection with aninstruction execution system, apparatus, or device.

Program code embodied on a computer readable medium may be transmittedusing any appropriate medium, including but not limited to wireless,wireline, optical fiber cable, radio frequency, etc., or any suitablecombination of the foregoing.

Computer program code for carrying out operations for aspects of thepresent invention may be written in any combination of one or moreprogramming languages, including an object oriented programming languagesuch as Java, Smalltalk, C++, or the like, and conventional proceduralprogramming languages such as the “C” programming language or similarprogramming languages. The program code may execute as a stand-alonesoftware package, and may execute partly on a user's computing deviceand partly on a remote computer. The remote computer may be connected tothe user's computing device through any type of network, including alocal area network (“LAN”), a wide area network (“WAN”), or through theInternet using an Internet Service Provider.

Aspects of the present invention are described above with reference toflow diagrams and/or block diagrams of methods, apparatus (systems), andcomputer program products according to embodiments of the invention. Itwill be understood that each flow or block of the flow diagrams and/orblock diagrams, and combinations of flows or blocks in the flow diagramsand/or block diagrams, can be implemented by computer programinstructions. These computer program instructions may be provided to aprocessor of a general purpose computer, special purpose computer, orother programmable data processing apparatus to produce a machine, suchthat the instructions, which execute via the processor of the computeror other programmable data processing apparatus, create means forimplementing the functions/acts specified in the flow diagram flow orflows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computerreadable medium that can direct a computer, other programmable dataprocessing apparatus, or other devices to function in a particularmanner, such that the instructions stored in the computer readablemedium produce an article of manufacture including instructions whichimplement the function/act specified in the flow diagram flow or flowsand/or block diagram block or blocks.

The computer program instructions may also be loaded onto a computer,other programmable data processing apparatus, or other devices to causea series of operational steps to be performed on the computer, otherprogrammable apparatus, or other devices to produce a computerimplemented process such that the instructions which execute on thecomputer or other programmable apparatus provide processes forimplementing the functions/acts specified in the flow diagram flow orflows and/or block diagram block or blocks.

Flow diagrams and/or block diagrams presented in the figures hereinillustrate the architecture, functionality, and operation of possibleimplementations of systems, methods, and computer program productsaccording to various embodiments of the present invention. In thisregard, each flow or block in the flow diagrams or block diagrams mayrepresent a module, segment, or portion of code, which comprises one ormore executable instructions for implementing the specified logicalfunction(s). It should also be noted that, in some alternativeimplementations, the functions noted in the flows and/or blocks mayoccur out of the order noted in the figures. For example, two blocksshown in succession may, in fact, be executed substantiallyconcurrently, or the blocks may sometimes be executed in the reverseorder, depending upon the functionality involved. It will also be notedthat each block of the block diagrams and/or each flow of the flowdiagrams, and combinations of blocks in the block diagrams and/or flowsin the flow diagrams, may be implemented by special purposehardware-based systems that perform the specified functions or acts, orcombinations of special purpose hardware and computer instructions.

While embodiments of the present invention have been described,additional variations and modifications in those embodiments may occurto those skilled in the art once they learn of the basic inventiveconcepts. Therefore, it is intended that the appended claims shall beconstrued to include the described embodiments and all such variationsand modifications as fall within the spirit and scope of the invention.

1. A computer-implemented method of failure-controlled messagepublication and feedback in a publish/subscribe messaging environment,comprising: receiving, at a message broker, a message published by amessage publisher, the message having associated therewith a topic andclassification criteria for determining successful publication of themessage; consulting, by the message broker, registered subscriptions ofa plurality of message subscribers that have registered with the messagebroker to receive published messages, each subscription specifying atopic and subscriber classification information, to determine whetherrequirements of the classification criteria associated with thepublished message are met; and responsive to the consulting determiningthat the requirements are met, publishing the message by the messagebroker and notifying the message publisher that the published messagewas published successfully, and otherwise notifying the messagepublisher that the published message was not published successfully,wherein publishing the message by the message broker further comprises:selecting, by the message broker from the plurality of messagesubscribers, each subscriber for which the registered topic matches thetopic associated with the published message; and sending the messagefrom the message broker to each of the at least one selected subscriber.2. The method according to claim 1, wherein the registered subscriberclassification information comprises an importance level for receivingpublished messages having the registered topic associated therewith. 3.The method according to claim 2, wherein the importance level is aninteger value.
 4. The method according to claim 1, wherein theclassification criteria associated with the message comprises importancecriteria.
 5. The method according to claim 1, wherein the classificationcriteria associated with the message is specified as one or moreparameters, which together specify requirements for the successfulpublication of the message.
 6. The method according to claim 1, whereinthe classification criteria associated with the message is specified asone or more rules, which together specify requirements for thesuccessful publication of the message.
 7. The method according to claim1, wherein the sending occurs, responsive to selecting a plurality ofthe registered message subscribers, in a decreasing order of theregistered subscriber classification information of the plurality ofselected subscribers.
 8. The method according to claim 1, whereinnotifying the publisher is replaced by notifying a third party, thethird party adapted for monitoring whether the published messages arepublished successfully.
 9. The method according to claim 1, wherein theclassification information is stored in a repository in association withthe published message.
 10. The method according to claim 1, furthercomprising: recording information pertaining to the sending of themessage from the message broker to each of the at least one selectedsubscriber; and including at least a portion of the recorded informationin the notification to the message publisher.
 11. The method accordingto claim 1, wherein subscriptions to a highest value of the subscriberclassification information are limited to a particular subset of themessage subscribers.
 12. The method according to claim 1, furthercomprising providing an audit capability for published messagesassociated with at least one topic by: registering requestedsubscriptions that specify any of the at least one topic and a highestvalue of the subscriber classification information only if thesubscriber requesting the subscription is an auditing subscriber; andincluding, in the classification criteria for each published messageassociated with any of the at least one topic, a requirement that theauditing subscriber is registered to receive the published messages. 13.The method according to claim 1, wherein: the classification criteriaassociated with the message comprises importance criteria; and thesubscriber classification information comprises an importance level forreceiving published messages having the registered topic associatedtherewith; and further comprising providing an audit capability forpublished messages associated with at least one topic by: registering anauditing subscriber to receive published messages having associatedtherewith any of the at least one topic, each registered subscriptionfor the auditing subscriber specifying a highest importance level as thesubscriber classification information; and specifying, in theclassification criteria for each published message associated with anyof the at least one topic, a requirement that at least one subscriberhaving the highest importance level is registered to receive thepublished messages.
 14. The method according to claim 13, wherein theauditing subscriber is a durable subscriber, the durable subscribercharacterized by being subsequently sent all messages which werepublished to other subscribers while the durable subscriber isdisconnected from the message broker yet retains an active registeredsubscription for which the registered topic matches the topic associatedwith the published message.
 15. The method according to claim 1, furthercomprising: forwarding the published message, by the message broker, toeach of at least one additional message broker to which the messagebroker is communicably coupled in a cluster environment, each additionalmessage broker having a plurality of registered message subscribers thathave registered subscriptions therewith to receive published messages,each registered subscription specifying a topic and subscriberclassification information; receiving, at the message broker from eachof the at least one additional message brokers, feedback regardingwhether the registered subscribers of the additional message brokercontribute to meeting the requirements of the classification criteriaassociated with the published message; and consolidating the feedbackreceived from each of the at least one additional message brokers withresults of the consulting, to determine whether the requirements of theclassification criteria associated with the published message are met;and wherein publishing the message by the message broker furthercomprises notifying, by the message broker, each of the additionalmessage brokers to publish the message to all subscribers of theadditional message broker which have registered for receiving publishedmessages having the topic associated with the published message.
 16. Themethod according to claim 1, wherein: the consulting and the publishingare carried out in context of a transaction; and further comprising:committing the transaction responsive to the consulting determining thatthe requirements are met; rolling back the transaction responsive to theconsulting not determining that the requirements are met.
 17. A systemfor failure-controlled message publication control and feedback in apublish/subscribe messaging environment, comprising: a computercomprising a processor; and instructions which are executable, using theprocessor, to implement functions comprising: receiving, at a messagebroker, a message published by a message publisher, the message havingassociated therewith a topic and classification criteria for determiningsuccessful publication of the message; consulting, by the messagebroker, registered subscriptions of a plurality of message subscribersthat have registered with the message broker to receive publishedmessages, each subscription specifying a topic and subscriberclassification information, to determine whether requirements of theclassification criteria associated with the published message are met;and responsive to the consulting determining that the requirements aremet, publishing the message by the message broker and notifying themessage publisher that the published message was published successfully,and otherwise notifying the message publisher that the published messagewas not published successfully, wherein publishing the message by themessage broker further comprises: selecting, by the message broker fromthe plurality of message subscribers, each subscriber for which theregistered topic matches the topic associated with the publishedmessage; and sending the message from the message broker to each of theat least one selected subscriber.
 18. The system according to claim 17,wherein the functions further comprise: recording information pertainingto the sending of the message from the message broker to each of the atleast one selected subscriber; and including at least a portion of therecorded information in the notification to the message publisher.
 19. Acomputer program product for failure-controlled message publicationcontrol and feedback in a publish/subscribe messaging environment, thecomputer program product comprising: a computer readable storage mediumhaving computer readable program code embodied therein, the computerreadable program code configured for: receiving, at a message broker, amessage published by a message publisher, the message having associatedtherewith a topic and classification criteria for determining successfulpublication of the message; consulting, by the message broker,registered subscriptions of a plurality of message subscribers that haveregistered with the message broker to receive published messages, eachsubscription specifying a topic and subscriber classificationinformation, to determine whether requirements of the classificationcriteria associated with the published message are met; and responsiveto the consulting determining that the requirements are met, publishingthe message by the message broker and notifying the message publisherthat the published message was published successfully, and otherwisenotifying the message publisher that the published message was notpublished successfully, wherein publishing the message by the messagebroker further comprises: selecting, by the message broker from theplurality of message subscribers, each subscriber for which theregistered topic matches the topic associated with the publishedmessage; and sending the message from the message broker to each of theat least one selected subscriber.
 20. The computer program productaccording to claim 19, the computer readable program code furtherconfigured for providing an audit capability for published messagesassociated with at least one topic by: registering requestedsubscriptions that specify any of the at least one topic and a highestvalue of the subscriber classification information only if thesubscriber requesting the subscription is an auditing subscriber; andincluding, in the classification criteria for each published messageassociated with any of the at least one topic, a requirement that theauditing subscriber is registered to receive the published messages.